Security Engineer, Kubernetes

VulnU; Palo Alto, Austin, New York, Washington (CA, TX, NY, District of Columbia); Vor Ort; USD 100.000 - 258.000; Vollzeit

Benefits dieser Stelle

Equity

Flexible PTO

Zusammenfassung

SpaceXSI is seeking a Security Engineer to secure the Kubernetes-based platform behind X and SpaceXSI’s infrastructure, products, and workloads. You will pursue defense-in-depth, build automated tooling, and enforce least privilege at fleet scale.

You will assess security risk like an attacker, design controls, and collaborate with cross-functional teams to implement robust protection across clusters, identities, and supply chains.

Qualifikationen

• 3+ years in platform security, Kubernetes security, or offensive security against production infrastructure.
• Deep knowledge of pod and workload security: privileged containers, capabilities, host namespaces, host path mounts, service accounts, RBAC, admission control, and network isolation.
• Working knowledge of identity, secrets, workload identity, service-to-service trust, supply chain, runtime, and cloud access.

Aufgaben

• Secure the platform end to end: nodes, clusters, pods, roles, tokens, secrets, service-to-service communication, and the supply chain.
• Find and remediate overprivileged permissions and dangerous pod settings across operators, admission, networking, identity, and monitoring.
• Design and build security tooling and automation, including AI-assisted analysis, that catches risky configuration and overprivilege.
• Strengthen identity and secrets handling so workloads receive only the access they need.
• Improve supply-chain security through secure base images, continuous scanning, and related controls.
• Review changes that affect RBAC, operators, ServiceAccounts, network policies, and anything running with elevated privileges.

Kenntnisse

Kubernetes security

Pod security

RBAC

Identity & secrets management

Threat modeling

Go Python Rust

Tools

Go

Python

Rust

Helm

GitOps

Jobbeschreibung

# Security Engineer, KubernetesxAI · x.aiCategory: Cloud SecurityLocation: Palo Alto, CA; Austin, TX; New York, NY; Washington, DCSalary: $100,000 – $258,000## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* Equity* Flexible PTOSpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars.SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next.ABOUT THE ROLE:We protect the platform that runs X and SpaceXSI. We don’t just report issues, we actively look for real risks and exploits in our Kubernetes environments and turn them into durable fixes and tooling. You will secure the platform behind X and SpaceXSI’s infrastructure, products, and workloads. If you know pod and platform security, think in attack paths, and want to build the defenses that make the platform safer at scale, we want to hear from you.We ValueUnderstanding how Kubernetes can actually be abused, not only how it is configuredShipping practical controls and tooling over writing policy documentsLeast privilege and defense-in-depth at fleet scaleClear findings and fixes that platform teams can act onSafe, constrained validation that does not put production at riskRESPONSIBILITIES:Secure the platform end to end: nodes, clusters, pods, roles, tokens, secrets, service-to-service communication, and the supply chainFind and remediate overprivileged permissions, dangerous pod and workload settings, and escalation paths in operators, admission, networking, identity, and monitoringAssess our own platform the way an adversary would, including container and pod breakout, privilege escalation, and movement across workloads, using safe and constrained validation, then fix what you findDesign and build security tooling and automation, including AI-assisted analysis, that catches risky configuration and overprivilege before or after it shipsStrengthen identity and secrets handling so workloads receive only the access they needImprove supply-chain security through secure base images, continuous scanning, and related controlsReview changes that affect RBAC, operators, ServiceAccounts, network policies, and anything running with elevated privilegesPartner with platform and product teams as a security owner, taking problems from identification through rolloutContribute to fleet-wide hardening, policy enforcement, and safer defaultsBASIC QUALIFICATIONS:3+ years in platform security, Kubernetes security, or offensive security against production infrastructureDeep knowledge of pod and workload security: privileged containers, capabilities, host namespaces, host path mounts, service accounts, RBAC, admission control, and network isolationWorking knowledge of identity, secrets, workload identity, service-to-service trust, supply chain, runtime, and cloud accessAble to think like an attacker, measure blast radius, and turn the path into a detection, control, or toolComfortable with operators, custom resources, Helm, and GitOps workflowsAble to build or modify security tooling in Go, Python, or Rust when a control needs automationBonus: Image scanning, SBOMs, secure base images, policy-as-code (Kyverno, OPA), multi-cluster environments, runtime detection, and security testing of customer-facing applicationOpen to working out of one of our offices: Palo Alto, Austin, DC, or New York.PREFERRED SKILLS AND EXPERIENCE:Experience developing AI-driven security tools or integrating AI into security workflowsFamiliarity with Kubernetes-based environments and securing cloud-native infrastructureProven ability to drive technical decisions and influence security practices across teamsA passion for challenging the status quo and building transformative security solutionsStrong collaboration skills, with experience working in dynamic, cross-functional teamsA sense of humor and adaptability to thrive in a fast-paced, mission-driven environmentCOMPENSATION AND BENEFITS:$100,000 - $258,000 USDBase salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short long-term disability insurance, life insurance, and various other discounts and perks.SpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.